The Agent Skills Directory

[SAFE]: The skill is primarily documentation and instructional content for developers. It explains how to interact with the vendor's own services (Bitrix24 and VibeCode).
[DATA_EXPOSURE]: The skill correctly identifies a potential security risk in the 'Anti-patterns' section, warning against storing VibeCode API keys in B24Frame.options.appSet because that data would be visible to other users. This is a positive security guideline.
[COMMAND_EXECUTION]: The code example uses standard fetch and the official @bitrix24/b24jssdk library to interact with legitimate vendor endpoints (vibecode.bitrix24.tech). It does not execute arbitrary shell commands or access sensitive local files.
[CREDENTIALS_UNSAFE]: The code samples correctly use environment variables (process.env.VIBE_API_KEY, process.env.B24_HOOK) instead of hardcoding secrets, following security best practices.

b24jssdk-vibecode